Nitrokey would probably be my choice as both the hardware and software are open source( in fact you could probably build your own if you wanted to). I don't trust yubikey as the firmware that runs on them is closed source so you just don't know of it's actually secure.